Loading story…
Red Hat released RHSA-2024:3529 for supported RHEL 8.4 service variants, updating the Linux kernel to remediate CVE-2023-52578 and CVE-2024-1086. The advisory applies to Extended Life Cycle Long Life, Advanced Update Support, Telecommunications Update Service, and SAP Solutions update-service deployments on x86_64 and ppc64le.
CVE-2023-52578 is a low-severity race condition in the bridge-networking function br_handle_frame_finish() that can cause unsynchronized network-device statistics updates; upstream resolved it with the SMP-safe DEV_STATS_INC() mechanism. The kernel update also fixes a use-after-free vulnerability in nftables' nft_verdict_init() function (CVE-2024-1086). Organizations should install the updated kernel and reboot affected systems for the fixes to take effect.
See real exploitation activity before you spend the cycle.
11 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:3618 and RHSA-2024:3627, providing fixed RHEL 8 kernel and kernel-rt packages, respectively.
Red Hat released RHSA-2024:3530 with fixed kernel-rt packages for the RHEL 8.4 Telecommunications Update Service.
Red Hat issued RHSA-2024:3529 for supported RHEL 8.4 service variants, providing kernel version 4.18.0-305.131.1.el8_4 to remediate CVE-2023-52578 and CVE-2024-1086. Red Hat stated that affected systems must be rebooted after installation for the fixes to take effect.
Red Hat released RHSA-2024:3528 with fixed kernel packages for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat released RHSA-2024:3462 with fixed kernel packages for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat issued RHSA-2024:3318 for RHEL Server 7.6 Advanced Update Support on x86_64, providing kernel build 3.10.0-957.113.1.el7 to fix CVE-2024-1086, a use-after-free flaw in nf_tables' nft_verdict_init() function. Red Hat instructed administrators to reboot after applying the update.
Red Hat released RHSA-2024:2394, updating RHEL 9 kernel packages to remediate CVE-2023-52578.
Red Hat published the CVE-2023-52578 record for a Linux kernel network bridge race condition. Red Hat rated the issue Low severity with a CVSS v3.1 score of 4.7.
Red Hat released RHSA-2024:3810 with fixed kernel packages for Red Hat Enterprise Linux 8.8 Extended Update Support.
The Linux kernel resolved the bridge-networking race condition by replacing the affected statistics updates with the SMP-safe DEV_STATS_INC() mechanism.
syzbot and the Kernel Concurrency Sanitizer reported a race condition in Linux's bridge br_handle_frame_finish() function, where concurrent CPUs could update shared network-device statistics without synchronization.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceredhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **RHSA-2022:5626** for Red Hat Enterprise Linux 8.4 Extended Update Support, delivering kernel `4.18.0-305.57.1.el8_4` for x86_64, s390x, ppc64le, and aarch64. The update remediates six kernel vulnerabilities, including **CVE-2022-32250**, a netfilter use-after-free write that can enable local root escalation, and **CVE-2022-1729**, affecting `perf_event_open`. It also addresses cgroup migration permission handling in **CVE-2021-4197**, which can let a less-privileged process induce a privileged process to write through an attacker-created file descriptor, and **CVE-2021-4203**, a socket credential race that can crash the system or disclose kernel information. Red Hat also issued **RHBA-2022:5744** to update Red Hat OpenStack Platform 16.2 container images, incorporating the kernel security fixes for x86_64 and IBM Power ppc64le deployments. Organizations should install the applicable RHEL kernel update and reboot hosts for remediation to take effect; OpenStack Platform users should upgrade the supplied container images and rebuild dependent images.
Aug 26, 2026
Red Hat released Linux kernel security updates for supported **RHEL 8 and RHEL 9** streams, addressing dozens of flaws across networking, virtualization, storage, graphics, Bluetooth, filesystems, and device drivers. The updates include **CVE-2024-36886**, a TIPC message-reassembly use-after-free issue that could permit remote code execution on affected RHEL 8.6 systems, as well as memory-corruption, information-disclosure, race-condition, denial-of-service, and NULL-pointer defects. RHEL 9.2 updates delivered kernel `5.14.0-284.75.1.el9_2`, while RHEL 8.8 and 8.6 updates provided `4.18.0-477.64.1.el8_8` and `4.18.0-372.111.1.el8_6`, respectively; Real Time kernel users received `5.14.0-284.75.1.rt14.360.el9_2`. The fixes cover, among other issues, **CVE-2024-35791**, a KVM SVM use-after-free in `svm_register_enc_region()`, **CVE-2024-36952**, a race condition in the SCSI `lpfc` driver's NPIV cleanup sequence, and **CVE-2024-27417**, an IPv6 reference leak in `inet6_rtm_getaddr()`. Red Hat shipped remediation through RHSA-2024:4823, RHSA-2024:4831, RHSA-2024:4740, RHSA-2024:4447, RHSA-2024:0113, and RHSA-2024:6567 for affected x86_64, ARM64, IBM Z, and Power offerings, including EUS, SAP, and extended-lifecycle channels. Organizations should apply the applicable kernel packages and **reboot systems** to activate the fixes.
Aug 26, 2026
Red Hat released Linux kernel security updates for **RHEL 8** and **RHEL 9** that remediate vulnerabilities across networking, filesystems, memory management, and platform components. The fixes include `CVE-2024-41040`, a use-after-free in the traffic-control connection-tracking path triggered after a conntrack clash; `CVE-2024-26826` in Multipath TCP stale-subflow reinjection; and `CVE-2024-26870`, which can trigger a kernel BUG in NFSv4.2 extended-attribute handling. Other remediated issues include an ext4 corrupted-block-group allocation flaw (`CVE-2024-26772`), a swap race (`CVE-2024-26960`), a writeback divide-by-zero (`CVE-2024-26720`), and CacheFiles memory leakage (`CVE-2024-26840`). The updates also address the WMI character-device issue tracked as `CVE-2023-52864` and additional kernel defects affecting areas such as TCP, Wi-Fi, VFIO, storage, drivers, IPv6, virtualization, and Netfilter. Red Hat distributed fixes through advisories including **RHSA-2024:5065** for selected RHEL 8.6 channels and **RHSA-2024:5363** for RHEL 9, covering supported architectures and selected EUS, SAP, telecommunications, mission-critical, and lifecycle support variants. Organizations should deploy the applicable updated kernel packages and reboot affected systems to activate the fixes.
Aug 26, 2026